CVE-2025-58897: WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion.
This issue affects Fermentio: from n/a through 1.5.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Axiomthemes Fermentio (WordPress theme)from your environment.Uninstall or deactivate the Fermentio WordPress theme (affected versions: through 1.5.0) until a security update/fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58897?
The severity of CVE-2025-58897 is rated as high with a score of 8.1.
How do I fix CVE-2025-58897?
To fix CVE-2025-58897, update the Axiomthemes Fermentio theme to a version later than 1.5.0.
What does CVE-2025-58897 affect?
CVE-2025-58897 affects the Axiomthemes Fermentio theme versions from n/a through 1.5.0.
What type of vulnerability is CVE-2025-58897?
CVE-2025-58897 is a Local File Inclusion vulnerability in PHP.
When was CVE-2025-58897 published?
CVE-2025-58897 was published on June 2, 2026.